$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/FB170730324211EFA9B5F949C4F9AE02.roa File: FB170730324211EFA9B5F949C4F9AE02.roa (raw, json) Hash identifier: RkMRmNqmHZ9s0oSB72MGnOxEbYhdY42Vffpm2UpowTM= Subject key identifier: B0:07:DA:2F:3D:8C:1D:E0:7E:A5:C0:F7:19:A8:D7:CA:5D:D1:C5:25 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0BE3 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/FB170730324211EFA9B5F949C4F9AE02.roa Signing time: Sun 22 Sep 2024 18:57:12 +0000 ROA not before: Sun 22 Sep 2024 18:57:12 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 136482 IP address blocks: 202.53.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3043 (0xbe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Sep 22 18:57:12 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f06888-f555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:15:46:dd:c0:3a:33:65:db:60:89:27:c0: 4e:66:8e:6f:2e:d4:dc:03:1a:86:a3:c4:aa:e2:01: c9:89:33:b6:f9:f1:e2:c6:a9:77:e6:ce:57:f9:79: 04:f0:c7:fc:bf:59:37:ab:e2:2a:8c:e3:53:31:8d: 0f:73:17:d2:f2:e5:f1:d9:70:42:f5:4f:23:a5:e5: cf:c6:e8:b2:62:e1:1d:87:cf:27:08:c2:05:02:0c: 70:6d:b7:b9:51:23:bb:eb:ff:36:2b:50:2e:5c:f3: 29:d7:55:9b:9d:b3:e6:0f:05:0a:c1:81:98:3a:05: d1:a4:44:05:aa:6c:d3:12:19:ff:b1:5e:f0:2f:8d: bf:c2:41:16:d2:7e:8d:ae:06:88:1d:c6:07:53:9f: dc:a6:82:b5:d3:4f:83:f4:ca:06:5d:ed:cd:b4:64: 02:e3:bf:16:43:a3:c5:f2:47:60:a8:5d:1a:3b:37: 3f:3f:87:b2:e2:3d:7b:35:ae:c9:b3:11:62:50:71: 3d:4d:8b:ae:4b:d4:b1:53:b5:0c:75:29:c6:5f:a3: 78:ca:6c:cf:67:65:5e:9f:fa:f2:90:a8:96:b6:ef: 62:2a:87:38:d1:34:dc:06:c0:d1:5e:f7:9c:13:f2: 50:64:b0:d1:38:0f:44:94:2c:20:43:03:7a:74:e3: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:07:DA:2F:3D:8C:1D:E0:7E:A5:C0:F7:19:A8:D7:CA:5D:D1:C5:25 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/FB170730324211EFA9B5F949C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.53.141.0/24 Signature Algorithm: sha256WithRSAEncryption 43:3c:25:26:55:8a:a0:4c:ae:cc:46:8b:ef:ad:ae:e2:a0:b6: 3c:d7:52:20:4e:0b:b6:f6:f6:91:d1:fb:11:b0:ee:9d:84:b2: 47:8b:fb:f5:5a:50:0c:4f:50:4e:d4:93:05:23:04:af:4d:51: c3:ea:8f:c3:9b:98:d0:21:d3:5c:aa:81:3b:58:9f:9f:a0:17: 58:66:c0:ab:95:74:7e:4c:02:c0:0c:0d:a4:06:e5:15:df:e9: 7f:22:a6:dd:79:95:71:65:b1:b6:8f:cf:4c:11:42:c9:5d:e5: 71:e2:17:94:60:a3:f9:a0:b9:75:55:26:42:4f:af:20:85:81: 8f:51:5a:84:36:e6:78:d6:20:71:cc:cd:59:f6:b9:0c:78:27: 4d:5a:75:00:d1:2a:b0:5f:97:e1:e7:5f:c1:35:50:ee:62:cb: 29:23:0f:f4:25:59:6a:f6:f3:2f:77:c6:52:5c:1d:b6:f0:2c: e9:33:d6:55:e0:4e:77:0b:3d:7e:cb:b8:31:e3:0f:44:e4:77: 89:68:30:ec:9f:64:81:8e:6b:e9:fb:28:41:e2:1e:c3:6a:ae: 8a:b2:31:f1:32:f7:d7:2c:29:6e:51:06:14:9f:52:0d:45:cc: 5b:de:54:33:a3:31:e8:12:35:c6:7c:e2:c7:6c:25:1b:55:88: 2c:e4:dc:42 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjQwOTIyMTg1NzEyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYwNjg4OC1mNTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4MVRt3AOjNl22CJJ8BOZo5vLtTcAxqGo8Sq4gHJiTO2+fHixql35s5X+XkE 8Mf8v1k3q+IqjONTMY0PcxfS8uXx2XBC9U8jpeXPxuiyYuEdh88nCMIFAgxwbbe5 USO76/82K1AuXPMp11WbnbPmDwUKwYGYOgXRpEQFqmzTEhn/sV7wL42/wkEW0n6N rgaIHcYHU5/cpoK100+D9MoGXe3NtGQC478WQ6PF8kdgqF0aOzc/P4ey4j17Na7J sxFiUHE9TYuuS9SxU7UMdSnGX6N4ymzPZ2Ven/rykKiWtu9iKoc40TTcBsDRXvec E/JQZLDROA9ElCwgQwN6dOMY/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLAH2i89 jB3gfqXA9xmo18pd0cUlMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUzMDgvQzc3RjdBMTIwNkQ1MTFFQThBODk3RjRGQzRGOUFFMDIvRkIxNzA3MzAz MjQyMTFFRkE5QjVGOTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKNY0wDQYJKoZIhvcNAQELBQADggEBAEM8JSZViqBMrsxG i++truKgtjzXUiBOC7b29pHR+xGw7p2EskeL+/VaUAxPUE7UkwUjBK9NUcPqj8Ob mNAh01yqgTtYn5+gF1hmwKuVdH5MAsAMDaQG5RXf6X8ipt15lXFlsbaPz0wRQsld 5XHiF5Rgo/mguXVVJkJPryCFgY9RWoQ25njWIHHMzVn2uQx4J01adQDRKrBfl+Hn X8E1UO5iyykjD/QlWWr28y93xlJcHbbwLOkz1lXgTncLPX7LuDHjD0Tkd4loMOyf ZIGOa+n7KEHiHsNqroqyMfEy99csKW5RBhSfUg1FzFveVDOjMegSNcZ84sdsJRtV iCzk3EI= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org